CVE-2026-14868
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
The vulnerability in PcVue before version 17.0.0 is due to the use of an insufficiently strong encryption algorithm for protecting user account configuration in the built-in directory. A local attacker can alter the existing configuration and gain privileged access to the application.
Risk Assessment
The risk involves potential privilege escalation by a local attacker, which could lead to full control over the PcVue application and access to sensitive data or industrial systems.
Recommendation
It is recommended to immediately upgrade PcVue to version 17.0.0 or later, which includes a fix that strengthens user configuration encryption.
Original NVD description (English source)
The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0.0, is not strong enough for the level of protection required. A local attacker could alter the existing configuration and ultimately gain privileged access to the PcVue application.